Using threat modelling to choose a password manager